Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1639/wFMwwjPkgeVp5bPks5hEhlE1OR4.roa
File:                     wFMwwjPkgeVp5bPks5hEhlE1OR4.roa (raw, json)
Hash identifier:          RJ/Le3GD7m+lwU2PmIRlJO5wunK3ImqXwuIXGPAfEEI=
Subject key identifier:   C0:53:30:C2:33:E4:81:E5:69:E5:B3:E4:B3:98:44:86:51:35:39:1E
Certificate issuer:       /CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
Certificate serial:       61
Authority key identifier: 24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/wFMwwjPkgeVp5bPks5hEhlE1OR4.roa
Signing time:             Thu 29 Feb 2024 01:29:14 +0000
ROA not before:           Thu 29 Feb 2024 01:29:14 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     131078
IP address blocks:        202.255.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
        Validity
            Not Before: Feb 29 01:29:14 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=C05330C233E481E569E5B3E4B39844865135391E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7d:90:17:f8:4e:c3:ba:82:7c:a5:99:81:ff:
                    83:76:85:da:8a:2f:11:46:ef:1d:53:ed:fe:8f:5a:
                    68:4d:72:b6:5a:0d:7d:c0:c9:07:32:87:ac:c5:75:
                    52:d1:bd:01:0f:ef:93:cb:2e:20:82:5b:e0:ec:bc:
                    52:d7:7f:7f:43:a0:03:98:31:89:02:78:6e:26:bf:
                    dc:74:44:b1:5f:b6:5c:cd:14:f7:d0:4c:02:56:82:
                    99:bd:b7:31:ac:c0:80:8f:74:d8:4f:57:e0:c2:5f:
                    a4:78:c3:07:b4:d1:dd:a8:f6:d9:73:12:c4:2b:05:
                    90:e5:ed:75:7e:4b:05:11:81:e6:07:b6:f7:89:2a:
                    f6:5f:61:dd:0e:17:f0:84:87:a0:d4:f7:3f:ab:77:
                    56:57:36:15:2d:9a:e5:ae:bd:ee:1f:1b:fc:97:da:
                    84:44:78:73:c6:4d:70:60:9d:59:06:8f:8a:3f:b0:
                    f8:93:67:97:24:54:18:eb:f5:74:fa:7a:fd:0a:84:
                    84:ca:a9:e0:9b:5b:c3:ef:51:e8:25:9e:e3:73:88:
                    43:e8:84:ef:df:42:e2:e2:dc:da:f8:77:25:97:88:
                    81:bb:42:a3:4d:e8:f4:e4:bb:f6:c8:f2:b2:3d:4d:
                    c2:8a:2c:68:65:8e:a1:79:f3:dc:1a:40:b4:81:4a:
                    01:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:53:30:C2:33:E4:81:E5:69:E5:B3:E4:B3:98:44:86:51:35:39:1E
            X509v3 Authority Key Identifier:
                keyid:24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/wFMwwjPkgeVp5bPks5hEhlE1OR4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.255.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:a6:b8:10:8a:b6:3c:a0:41:ee:c2:ba:5d:81:d8:3a:91:78:
         c2:87:50:da:80:62:47:f7:ac:38:55:ed:8e:c2:7a:25:86:cc:
         c2:79:c1:50:1d:c1:7d:b1:69:b3:dc:e9:c0:ad:20:c9:1c:7e:
         cb:88:f0:60:dc:5a:7e:fe:f9:2b:16:d3:1b:5e:c4:71:6f:61:
         45:df:c2:bd:c0:c6:5b:8f:ad:ad:9b:49:12:c9:47:17:2d:61:
         5e:bb:f1:5d:7e:da:44:10:43:0d:e2:41:7b:bb:e7:e1:71:77:
         d0:29:d2:47:86:24:65:e3:9a:85:a7:f6:1f:c5:3a:d9:4b:4e:
         a7:37:d6:ee:31:16:1d:84:75:e1:53:8b:a7:67:f7:5d:87:ad:
         0a:8e:6c:76:22:50:32:f8:f5:9d:c8:61:11:de:77:a4:b5:55:
         cb:97:8e:7c:0c:d1:81:44:c4:4e:21:51:39:bd:55:2c:a3:96:
         d5:2b:67:66:18:04:6e:9e:d8:ce:90:eb:d9:3f:b8:57:fd:f9:
         00:1e:64:04:21:f6:6e:eb:cc:43:29:b4:29:85:d8:80:e7:bb:
         47:2f:fe:e5:22:37:6a:2f:7a:d7:5c:e6:e4:37:87:32:3b:eb:
         a4:b3:46:e0:75:76:1d:e8:a3:39:4c:c9:ad:f3:fa:d8:1f:bb:
         a5:6a:de:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:56 2024 by rpki-client on console-fra.rpki-client.org